Static task
static1
Behavioral task
behavioral1
Sample
26567125560b2eeeb4fa8563cd912e791bd95f4b0a2b193caecb832eed5e4b4d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
26567125560b2eeeb4fa8563cd912e791bd95f4b0a2b193caecb832eed5e4b4d.exe
Resource
win10v2004-20230915-en
General
-
Target
26567125560b2eeeb4fa8563cd912e791bd95f4b0a2b193caecb832eed5e4b4d
-
Size
55KB
-
MD5
c5281865338b088db245f580454ccb06
-
SHA1
d94c9303c9a3ccbec91e482c2bf7538a715667f3
-
SHA256
26567125560b2eeeb4fa8563cd912e791bd95f4b0a2b193caecb832eed5e4b4d
-
SHA512
63fd506e6bb58ef7cacf18f75ecbfa9af664380a5365f9a9fa6d1d455397a73a4acfc84f9aec1237b1119e49cda46f84d17f2640e873878d90570303524a02b7
-
SSDEEP
768:XIU4YgM7BMQUL4dpaeOfrcP73wZTkcguYMSl8/EExwmuHa39ciEHoRDcW9o24fQD:1HgoBAL4S9bZTUJ8XxwmuHa3mzqcvst/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26567125560b2eeeb4fa8563cd912e791bd95f4b0a2b193caecb832eed5e4b4d
Files
-
26567125560b2eeeb4fa8563cd912e791bd95f4b0a2b193caecb832eed5e4b4d.exe windows x86
31632a87952bc989ed55d94788bc4f2f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ord2
ExtractAssociatedIconA
ord62
ShellExecuteExA
ord189
ord155
DragAcceptFiles
ShellAboutA
ord4
DragQueryFileA
DragFinish
olecli32
ord4
ord27
ord2
ord39
ord37
ord35
ord25
ord3
ord22
ord32
ord29
ord42
ord15
ord14
ord36
ord21
ord41
ord43
ord44
ord28
ord9
ord13
ord18
ord10
ord45
ord20
ord46
ord19
ord11
ord23
ord12
ord6
ord40
ord24
olesvr32
ord4
ord7
ord10
ord5
ord2
ord6
ord3
ord8
advapi32
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegQueryValueA
RegSetValueA
wininet
CommitUrlCacheEntryA
CreateUrlCacheEntryA
DeleteUrlCacheEntry
shdocvw
ord229
msvcrt
_vsnprintf
memmove
strchr
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
kernel32
LoadLibraryA
CreateFileW
FindFirstFileA
GetModuleHandleA
lstrcmpA
WideCharToMultiByte
GetStartupInfoA
GlobalAddAtomA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
GetSystemTime
SystemTimeToFileTime
GlobalHandle
RaiseException
Sleep
_lopen
_lread
MultiByteToWideChar
AddAtomA
CreateThread
GetFileAttributesA
SetFileAttributesA
GetAtomNameA
DeleteAtom
DeleteFileA
WaitForSingleObject
CloseHandle
GetLastError
GlobalAlloc
GlobalDeleteAtom
FreeLibrary
InterlockedExchange
FindClose
_lwrite
lstrcpyA
GlobalReAlloc
lstrcatA
GetACP
MulDiv
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GlobalFree
lstrcmpiA
GlobalLock
GlobalUnlock
OpenFile
_lcreat
_llseek
_lclose
GetProcAddress
lstrlenA
gdi32
SetBkMode
SetTextAlign
TextOutA
CopyMetaFileA
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
SetTextColor
SetBkColor
SelectObject
PatBlt
GetStockObject
TranslateCharsetInfo
CreateFontIndirectA
GetTextExtentPoint32A
DeleteObject
GetDeviceCaps
GetLayout
SetLayout
user32
ScrollWindow
GetScrollRange
CharNextA
OffsetRect
PeekMessageA
EnumThreadWindows
SetFocus
IsRectEmpty
RegisterClipboardFormatA
SetRectEmpty
DrawIcon
GetMenu
SendDlgItemMessageA
GetDlgItemTextA
CheckDlgButton
DestroyIcon
CharUpperBuffA
CharLowerA
GetSysColorBrush
IsWindowVisible
LoadStringW
GetKeyState
ReleaseDC
GetDC
CreateWindowExA
LoadStringA
LoadCursorA
GetDlgItem
LoadAcceleratorsA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
SendMessageA
ShowWindow
GetTopWindow
GetSystemMetrics
MessageBoxA
DialogBoxParamA
IsWindow
GetClientRect
SetDlgItemTextA
EndDialog
SetWindowTextA
EnableMenuItem
DestroyMenu
InsertMenuA
CreatePopupMenu
DeleteMenu
IsClipboardFormatAvailable
GetSubMenu
PostQuitMessage
LoadIconA
InvalidateRect
CloseClipboard
GetClipboardData
OpenClipboard
PostMessageA
DefWindowProcA
RegisterClassA
DestroyWindow
EnableScrollBar
EnableWindow
CheckRadioButton
SetScrollPos
GetScrollPos
IsDlgButtonChecked
SetWindowPos
GetWindowDC
SetClipboardData
EmptyClipboard
SystemParametersInfoA
EndPaint
FillRect
SetRect
BeginPaint
ReleaseCapture
ScreenToClient
SetCursor
SetCapture
IsIconic
DrawTextA
GetSysColor
UpdateWindow
BringWindowToTop
IsWindowEnabled
DrawFocusRect
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE